Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
File: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft (raw, json)
Hash identifier: tR0cpfdhy//ub7mu9z2QTyWNPlT1L3oYTIpyrl+SyEE=
Subject key identifier: 6D:25:71:C6:52:9C:ED:B5:01:EE:6F:D0:4B:7F:14:1B:52:26:FF:0E
Authority key identifier: 62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
Certificate issuer: /CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Certificate serial: 019DCB619DEF4E8A55301DE79367C7B113EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
Manifest number: CB
Signing time: Sun 26 Apr 2026 20:01:05 +0000
Manifest this update: Sun 26 Apr 2026 20:01:05 +0000
Manifest next update: Mon 27 Apr 2026 20:01:05 +0000
Files and hashes: 1: Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl (hash: wS1E6SsaL9KHiTlhuvYrCH7pJjwGL55UVtQL3sgVP5w=)
2: dfKf0SUwjmWHGeIDN6xaPuWneS0.roa (hash: KNktDMnqe7pkdReM74aezUUfDskVVEXdt3/JJZM1pKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cb:61:9d:ef:4e:8a:55:30:1d:e7:93:67:c7:b1:13:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d9b5da84610ed220f6d0fd1a888d1f9463f595
Validity
Not Before: Apr 26 20:01:05 2026 GMT
Not After : Apr 27 20:01:05 2026 GMT
Subject: CN=6d2571c6529cedb501ee6fd04b7f141b5226ff0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:13:62:57:e4:03:ca:30:49:16:fb:36:27:2f:
d3:10:c0:1e:31:1d:8b:03:9f:d0:41:42:03:1e:42:
7e:d5:cc:46:28:05:95:df:73:57:98:be:a1:e3:c0:
2d:28:4f:e3:fe:f0:51:84:b7:2a:5f:23:8e:d5:d4:
2f:07:31:2e:ce:e0:d5:a8:a0:1c:3a:76:1a:e2:6e:
bb:1e:16:65:04:03:ca:49:4c:1b:7f:73:6e:cc:9a:
74:db:44:e2:50:c3:68:5e:40:3d:7f:a1:ae:5d:85:
bb:85:fc:ba:09:22:29:8c:28:b6:77:92:e6:b6:bc:
39:39:1e:1e:8e:18:f8:9e:5e:5c:a5:f9:dd:60:6e:
bd:ac:fb:8d:68:48:1c:58:ec:af:fe:ef:a5:9b:23:
7a:03:52:6b:b1:14:e1:b2:83:ea:0b:c4:e1:c6:5d:
6a:44:57:b4:1f:d5:6c:27:50:7f:03:3e:c4:d6:c9:
55:af:8b:3c:09:f6:8d:19:e2:27:07:61:db:83:c9:
5d:81:64:fd:24:e3:a7:7f:a8:6f:60:4d:58:f0:4a:
25:63:cc:24:54:c0:f9:65:f4:ae:67:81:60:dd:7f:
5e:a8:c5:b0:9f:72:11:b3:1c:be:37:6e:8f:76:0c:
7d:67:31:65:d6:2b:d9:59:38:ea:c0:11:f2:06:6a:
90:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:25:71:C6:52:9C:ED:B5:01:EE:6F:D0:4B:7F:14:1B:52:26:FF:0E
X509v3 Authority Key Identifier:
keyid:62:D9:B5:DA:84:61:0E:D2:20:F6:D0:FD:1A:88:8D:1F:94:63:F5:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/755d7f-87af-4a29-9744-8ed368a9d600/1/Ytm12oRhDtIg9tD9GoiNH5Rj9ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:99:43:c7:df:93:fb:15:e3:6a:d9:17:f9:ce:60:2b:1a:6c:
07:1f:34:f0:00:09:95:bd:6d:2f:f9:23:0a:41:15:ac:e1:29:
a8:65:1b:86:1f:90:2b:d7:3b:d2:a4:f0:ef:0b:38:55:00:32:
b9:04:d0:b9:2c:de:52:b5:c3:92:7b:08:29:cd:0a:0b:88:3b:
d0:71:e4:60:1d:e2:d3:ca:3f:07:de:5c:48:b3:5f:8a:03:e3:
92:73:b9:c9:94:46:13:37:07:99:90:b2:d0:5e:a2:df:a1:7f:
22:f7:72:f6:5e:8a:0e:58:03:4d:b7:01:78:2a:51:3f:b1:0f:
f0:0b:6c:a9:fc:35:a2:65:61:a9:21:83:ba:2c:20:94:90:04:
96:58:e2:cb:0d:0f:53:6a:f3:b3:b4:57:95:50:31:76:fa:c6:
70:86:58:30:54:db:90:5a:cc:a5:20:c0:66:af:44:d5:ae:37:
0c:17:27:dc:9a:4b:3d:c6:8c:c7:29:1c:93:7b:cb:c7:d5:35:
7d:e5:87:ed:c0:e4:03:5a:d8:cf:2d:15:f3:e9:28:9c:7c:2b:
cf:3d:5a:50:71:af:3c:ed:a5:5f:0e:95:e6:c3:dc:2e:72:40:
3a:0a:0e:79:13:c7:4b:5b:b8:44:2b:65:87:db:d7:55:a2:ec:
81:36:20:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 04:18:02 2026 by rpki-client